How to Rob a Bank over the Phone - Lessons Learned from an Actual Social Engineering Engagement